How to integrate client certificate with jmeter












0















I am facing issue with the execution of the APIs in Jmeter. Our APIs have client certificate in .pfx format. I have converted the same in .jks and updated the same in the system.properties of jmeter. In jmeter I have created a csv file to pick up the created alias. However, the error is shown as



Error:
Response message: Non HTTP response message: java.lang.IllegalArgumentException: No certificate found for alias:'certalias'



Below is my alias info:
Alias name: certalias
Creation date: Nov 8, 2018
Entry type: PrivateKeyEntry
Certificate chain length: 1
Certificate[1]:



Jmeter Log:
2018-11-13 11:16:08,949 WARN o.a.j.u.SSLManager: Keystore file not found, loading empty keystore



Can you please help me with the integration of our client certificate with the Jmeter.



Thanks in advance.










share|improve this question























  • can you show your test plan and content of system.properties ? thx

    – UBIK LOAD PACK
    Nov 13 '18 at 6:38
















0















I am facing issue with the execution of the APIs in Jmeter. Our APIs have client certificate in .pfx format. I have converted the same in .jks and updated the same in the system.properties of jmeter. In jmeter I have created a csv file to pick up the created alias. However, the error is shown as



Error:
Response message: Non HTTP response message: java.lang.IllegalArgumentException: No certificate found for alias:'certalias'



Below is my alias info:
Alias name: certalias
Creation date: Nov 8, 2018
Entry type: PrivateKeyEntry
Certificate chain length: 1
Certificate[1]:



Jmeter Log:
2018-11-13 11:16:08,949 WARN o.a.j.u.SSLManager: Keystore file not found, loading empty keystore



Can you please help me with the integration of our client certificate with the Jmeter.



Thanks in advance.










share|improve this question























  • can you show your test plan and content of system.properties ? thx

    – UBIK LOAD PACK
    Nov 13 '18 at 6:38














0












0








0








I am facing issue with the execution of the APIs in Jmeter. Our APIs have client certificate in .pfx format. I have converted the same in .jks and updated the same in the system.properties of jmeter. In jmeter I have created a csv file to pick up the created alias. However, the error is shown as



Error:
Response message: Non HTTP response message: java.lang.IllegalArgumentException: No certificate found for alias:'certalias'



Below is my alias info:
Alias name: certalias
Creation date: Nov 8, 2018
Entry type: PrivateKeyEntry
Certificate chain length: 1
Certificate[1]:



Jmeter Log:
2018-11-13 11:16:08,949 WARN o.a.j.u.SSLManager: Keystore file not found, loading empty keystore



Can you please help me with the integration of our client certificate with the Jmeter.



Thanks in advance.










share|improve this question














I am facing issue with the execution of the APIs in Jmeter. Our APIs have client certificate in .pfx format. I have converted the same in .jks and updated the same in the system.properties of jmeter. In jmeter I have created a csv file to pick up the created alias. However, the error is shown as



Error:
Response message: Non HTTP response message: java.lang.IllegalArgumentException: No certificate found for alias:'certalias'



Below is my alias info:
Alias name: certalias
Creation date: Nov 8, 2018
Entry type: PrivateKeyEntry
Certificate chain length: 1
Certificate[1]:



Jmeter Log:
2018-11-13 11:16:08,949 WARN o.a.j.u.SSLManager: Keystore file not found, loading empty keystore



Can you please help me with the integration of our client certificate with the Jmeter.



Thanks in advance.







jmeter performance-testing keytool






share|improve this question













share|improve this question











share|improve this question




share|improve this question










asked Nov 13 '18 at 5:58









XRD TestXRD Test

1




1













  • can you show your test plan and content of system.properties ? thx

    – UBIK LOAD PACK
    Nov 13 '18 at 6:38



















  • can you show your test plan and content of system.properties ? thx

    – UBIK LOAD PACK
    Nov 13 '18 at 6:38

















can you show your test plan and content of system.properties ? thx

– UBIK LOAD PACK
Nov 13 '18 at 6:38





can you show your test plan and content of system.properties ? thx

– UBIK LOAD PACK
Nov 13 '18 at 6:38












1 Answer
1






active

oldest

votes


















0














I don't think you need to convert the .pfx into as .pfx is a PKCS12 certificate type and JMeter should support it out of the box.



Make sure to add the next lines to system.properties file:



javax.net.ssl.keyStore=your_certificate.pfx
javax.net.ssl.keyStorePassword=your_certificate_password
javax.net.ssl.keyStoreType=pkcs12


JMeter restart will be required to pick the properties up.



If you have > 1 certificates in the keystore you can select the exact certificate(s) by setting the following properties



https.keyStoreStartIndex=0
https.keyStoreEndIndex=0


By default JMeter will go for the first certificate in the keystore, if your certalias is not the first - amend the properties accordingly.



More information: How to Set Your JMeter Load Test to Use Client Side Certificates






share|improve this answer
























  • Thank you, This helped. But Dev team do not want to share the .pfx password as in Jmeter the password is not hidden.. So I was looking out for an alternate with .jks where we can have our own password

    – XRD Test
    Nov 15 '18 at 4:52













  • What do they mean by password is not hidden? If there is a problem with storing the password in system.properties file it can be overridden via -D command-line argument like jmeter -Djavax.net.ssl.keyStorePassword=your_certificate_password. Check out Apache JMeter Properties Customization Guide to learn more about different types of JMeter properties and ways of setting and overiding them.

    – Dmitri T
    Nov 15 '18 at 5:06











Your Answer






StackExchange.ifUsing("editor", function () {
StackExchange.using("externalEditor", function () {
StackExchange.using("snippets", function () {
StackExchange.snippets.init();
});
});
}, "code-snippets");

StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "1"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);

StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});

function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});


}
});














draft saved

draft discarded


















StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53274694%2fhow-to-integrate-client-certificate-with-jmeter%23new-answer', 'question_page');
}
);

Post as a guest















Required, but never shown

























1 Answer
1






active

oldest

votes








1 Answer
1






active

oldest

votes









active

oldest

votes






active

oldest

votes









0














I don't think you need to convert the .pfx into as .pfx is a PKCS12 certificate type and JMeter should support it out of the box.



Make sure to add the next lines to system.properties file:



javax.net.ssl.keyStore=your_certificate.pfx
javax.net.ssl.keyStorePassword=your_certificate_password
javax.net.ssl.keyStoreType=pkcs12


JMeter restart will be required to pick the properties up.



If you have > 1 certificates in the keystore you can select the exact certificate(s) by setting the following properties



https.keyStoreStartIndex=0
https.keyStoreEndIndex=0


By default JMeter will go for the first certificate in the keystore, if your certalias is not the first - amend the properties accordingly.



More information: How to Set Your JMeter Load Test to Use Client Side Certificates






share|improve this answer
























  • Thank you, This helped. But Dev team do not want to share the .pfx password as in Jmeter the password is not hidden.. So I was looking out for an alternate with .jks where we can have our own password

    – XRD Test
    Nov 15 '18 at 4:52













  • What do they mean by password is not hidden? If there is a problem with storing the password in system.properties file it can be overridden via -D command-line argument like jmeter -Djavax.net.ssl.keyStorePassword=your_certificate_password. Check out Apache JMeter Properties Customization Guide to learn more about different types of JMeter properties and ways of setting and overiding them.

    – Dmitri T
    Nov 15 '18 at 5:06
















0














I don't think you need to convert the .pfx into as .pfx is a PKCS12 certificate type and JMeter should support it out of the box.



Make sure to add the next lines to system.properties file:



javax.net.ssl.keyStore=your_certificate.pfx
javax.net.ssl.keyStorePassword=your_certificate_password
javax.net.ssl.keyStoreType=pkcs12


JMeter restart will be required to pick the properties up.



If you have > 1 certificates in the keystore you can select the exact certificate(s) by setting the following properties



https.keyStoreStartIndex=0
https.keyStoreEndIndex=0


By default JMeter will go for the first certificate in the keystore, if your certalias is not the first - amend the properties accordingly.



More information: How to Set Your JMeter Load Test to Use Client Side Certificates






share|improve this answer
























  • Thank you, This helped. But Dev team do not want to share the .pfx password as in Jmeter the password is not hidden.. So I was looking out for an alternate with .jks where we can have our own password

    – XRD Test
    Nov 15 '18 at 4:52













  • What do they mean by password is not hidden? If there is a problem with storing the password in system.properties file it can be overridden via -D command-line argument like jmeter -Djavax.net.ssl.keyStorePassword=your_certificate_password. Check out Apache JMeter Properties Customization Guide to learn more about different types of JMeter properties and ways of setting and overiding them.

    – Dmitri T
    Nov 15 '18 at 5:06














0












0








0







I don't think you need to convert the .pfx into as .pfx is a PKCS12 certificate type and JMeter should support it out of the box.



Make sure to add the next lines to system.properties file:



javax.net.ssl.keyStore=your_certificate.pfx
javax.net.ssl.keyStorePassword=your_certificate_password
javax.net.ssl.keyStoreType=pkcs12


JMeter restart will be required to pick the properties up.



If you have > 1 certificates in the keystore you can select the exact certificate(s) by setting the following properties



https.keyStoreStartIndex=0
https.keyStoreEndIndex=0


By default JMeter will go for the first certificate in the keystore, if your certalias is not the first - amend the properties accordingly.



More information: How to Set Your JMeter Load Test to Use Client Side Certificates






share|improve this answer













I don't think you need to convert the .pfx into as .pfx is a PKCS12 certificate type and JMeter should support it out of the box.



Make sure to add the next lines to system.properties file:



javax.net.ssl.keyStore=your_certificate.pfx
javax.net.ssl.keyStorePassword=your_certificate_password
javax.net.ssl.keyStoreType=pkcs12


JMeter restart will be required to pick the properties up.



If you have > 1 certificates in the keystore you can select the exact certificate(s) by setting the following properties



https.keyStoreStartIndex=0
https.keyStoreEndIndex=0


By default JMeter will go for the first certificate in the keystore, if your certalias is not the first - amend the properties accordingly.



More information: How to Set Your JMeter Load Test to Use Client Side Certificates







share|improve this answer












share|improve this answer



share|improve this answer










answered Nov 13 '18 at 9:25









Dmitri TDmitri T

70.3k33458




70.3k33458













  • Thank you, This helped. But Dev team do not want to share the .pfx password as in Jmeter the password is not hidden.. So I was looking out for an alternate with .jks where we can have our own password

    – XRD Test
    Nov 15 '18 at 4:52













  • What do they mean by password is not hidden? If there is a problem with storing the password in system.properties file it can be overridden via -D command-line argument like jmeter -Djavax.net.ssl.keyStorePassword=your_certificate_password. Check out Apache JMeter Properties Customization Guide to learn more about different types of JMeter properties and ways of setting and overiding them.

    – Dmitri T
    Nov 15 '18 at 5:06



















  • Thank you, This helped. But Dev team do not want to share the .pfx password as in Jmeter the password is not hidden.. So I was looking out for an alternate with .jks where we can have our own password

    – XRD Test
    Nov 15 '18 at 4:52













  • What do they mean by password is not hidden? If there is a problem with storing the password in system.properties file it can be overridden via -D command-line argument like jmeter -Djavax.net.ssl.keyStorePassword=your_certificate_password. Check out Apache JMeter Properties Customization Guide to learn more about different types of JMeter properties and ways of setting and overiding them.

    – Dmitri T
    Nov 15 '18 at 5:06

















Thank you, This helped. But Dev team do not want to share the .pfx password as in Jmeter the password is not hidden.. So I was looking out for an alternate with .jks where we can have our own password

– XRD Test
Nov 15 '18 at 4:52







Thank you, This helped. But Dev team do not want to share the .pfx password as in Jmeter the password is not hidden.. So I was looking out for an alternate with .jks where we can have our own password

– XRD Test
Nov 15 '18 at 4:52















What do they mean by password is not hidden? If there is a problem with storing the password in system.properties file it can be overridden via -D command-line argument like jmeter -Djavax.net.ssl.keyStorePassword=your_certificate_password. Check out Apache JMeter Properties Customization Guide to learn more about different types of JMeter properties and ways of setting and overiding them.

– Dmitri T
Nov 15 '18 at 5:06





What do they mean by password is not hidden? If there is a problem with storing the password in system.properties file it can be overridden via -D command-line argument like jmeter -Djavax.net.ssl.keyStorePassword=your_certificate_password. Check out Apache JMeter Properties Customization Guide to learn more about different types of JMeter properties and ways of setting and overiding them.

– Dmitri T
Nov 15 '18 at 5:06


















draft saved

draft discarded




















































Thanks for contributing an answer to Stack Overflow!


  • Please be sure to answer the question. Provide details and share your research!

But avoid



  • Asking for help, clarification, or responding to other answers.

  • Making statements based on opinion; back them up with references or personal experience.


To learn more, see our tips on writing great answers.




draft saved


draft discarded














StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53274694%2fhow-to-integrate-client-certificate-with-jmeter%23new-answer', 'question_page');
}
);

Post as a guest















Required, but never shown





















































Required, but never shown














Required, but never shown












Required, but never shown







Required, but never shown

































Required, but never shown














Required, but never shown












Required, but never shown







Required, but never shown







Popular posts from this blog

Full-time equivalent

さくらももこ

13 indicted, 8 arrested in Calif. drug cartel investigation